Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File: KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier: PdtiTrFMqT59y0OF9L6hptYTnVSctnA3NJ37HBRby3Q=
Subject key identifier: E5:38:97:2C:3C:41:BE:C2:17:1C:B4:CC:36:6D:D4:AE:C2:5E:86:DC
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number: 0114
Signing time: Sat 29 Mar 2025 04:18:07 +0000
Manifest this update: Sat 29 Mar 2025 04:18:06 +0000
Manifest next update: Sat 05 Apr 2025 04:18:06 +0000
Files and hashes: 1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: 8lcf2SJrR9uXbrFoi/3/1ZyrweDP17oZ6LIk5/nSA/M=)
2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: romYbuiWzdOqklzJCkUsUwW/w4kh63Rd2xMFubLjgPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0CAE
Validity
Not Before: Mar 29 04:18:06 2025 GMT
Not After : Apr 5 04:18:06 2025 GMT
Subject: CN=67e7747e-0121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:3a:58:60:f9:73:62:28:e3:23:82:4a:fd:
ef:ea:f9:b7:06:6f:48:c2:70:a2:49:4f:17:c9:b7:
f0:0a:1b:6c:4d:3b:15:39:4f:d5:6e:ab:c8:49:5c:
ba:bd:fe:af:8e:83:5f:f8:c1:7e:85:b6:37:40:c1:
a4:cb:c1:1c:c9:47:14:5c:84:48:0a:10:28:fe:2e:
aa:d0:e2:b0:27:5c:38:69:72:a4:8e:60:df:4d:24:
d9:5f:ca:7f:46:f2:b2:b5:e8:0d:ea:7a:8b:4a:a8:
cb:ff:c8:02:19:67:c1:c3:af:15:82:d1:95:a1:24:
78:0e:2c:56:dd:bf:8b:5f:97:2c:11:15:8d:97:09:
fc:4d:62:14:4f:f8:74:64:0c:0a:e7:b9:2e:a3:82:
dc:d0:c0:c0:c0:72:a1:c0:55:47:6b:1f:01:4e:64:
3c:4b:fd:76:0d:fc:b5:9a:66:70:33:e1:df:7a:e0:
69:5b:c6:1c:bf:1b:1f:4d:df:09:ba:13:b0:3b:ca:
75:df:89:f4:55:1b:5d:ff:1e:d1:d4:52:c4:fc:3d:
dc:e9:20:94:f7:8c:5c:a3:ef:9d:94:f5:55:38:92:
15:df:b7:1a:80:3f:64:eb:e3:a5:74:c3:fb:9c:ea:
50:7f:69:d1:bb:46:ff:d5:12:3b:e8:8d:39:83:4e:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:38:97:2C:3C:41:BE:C2:17:1C:B4:CC:36:6D:D4:AE:C2:5E:86:DC
X509v3 Authority Key Identifier:
keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:4a:62:96:7e:70:ec:35:f9:9d:a5:b3:cd:8d:78:72:56:82:
c8:72:c6:ac:0b:b5:61:87:72:e4:26:0b:c5:13:77:bf:96:91:
fe:b8:a6:96:ed:9c:73:4f:7d:2e:50:8c:5c:fa:29:2c:b7:ec:
21:af:70:b0:59:ae:9a:36:2f:ad:34:02:e2:e2:d5:1c:97:fe:
3d:19:56:5f:ba:58:56:01:03:08:58:ae:54:b4:95:25:b2:65:
57:3e:30:88:37:b9:38:f0:96:9b:2e:1b:38:7d:65:b4:3f:c3:
b6:ea:45:31:f3:ab:c4:98:45:6c:2b:05:cf:0f:a0:a9:37:ca:
11:d1:14:84:a2:00:92:b3:9f:fb:df:74:66:2c:f4:90:33:d4:
f9:ba:7a:21:77:b9:f3:29:9b:57:95:75:48:91:e2:bb:ac:d9:
60:e6:09:39:e2:15:fe:5f:f7:93:54:00:e1:74:c1:c0:5e:e3:
62:15:a7:4b:67:ce:60:0a:11:1f:b7:d8:65:00:c0:b0:ef:ee:
93:e6:dc:d0:cc:c0:5a:83:4e:67:ee:6a:3f:52:2e:b5:f6:42:
b6:45:77:86:db:71:0b:6f:aa:1e:fa:66:87:53:31:d6:76:99:
84:b0:72:fe:8a:4f:e2:36:96:d1:7e:40:7f:a9:ae:16:c8:5d:
78:fc:ef:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBDQUUxMTAvBgNVBAUTKDI5ODExRTFEQjA2OEJEQkJBQkZCN0FCNjk1Rjg1ODk4
QkQ2MThDNjkwHhcNMjUwMzI5MDQxODA2WhcNMjUwNDA1MDQxODA2WjAYMRYwFAYD
VQQDEw02N2U3NzQ3ZS0wMTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAri06WGD5c2Io4yOCSv3v6vm3Bm9IwnCiSU8XybfwChtsTTsVOU/VbqvISVy6
vf6vjoNf+MF+hbY3QMGky8EcyUcUXIRIChAo/i6q0OKwJ1w4aXKkjmDfTSTZX8p/
RvKytegN6nqLSqjL/8gCGWfBw68VgtGVoSR4DixW3b+LX5csERWNlwn8TWIUT/h0
ZAwK57kuo4Lc0MDAwHKhwFVHax8BTmQ8S/12Dfy1mmZwM+HfeuBpW8YcvxsfTd8J
uhOwO8p134n0VRtd/x7R1FLE/D3c6SCU94xco++dlPVVOJIV37cagD9k6+OldMP7
nOpQf2nRu0b/1RI76I05g07PnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU4lyw8
Qb7CFxy0zDZt1K7CXobcMB8GA1UdIwQYMBaAFCmBHh2waL27q/t6tpX4WJi9YYxp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMENBRS83QzY0NEVFNjZB
NzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3ZidXItM3EybGZoWW1MMWhq
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MENBRS83QzY0NEVFNjZBNzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3Zi
dXItM3EybGZoWW1MMWhqR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCESmKWfnDsNfmdpbPNjXhyVoLIcsasC7Vhh3LkJgvFE3e/lpH+uKaW
7ZxzT30uUIxc+ikst+whr3CwWa6aNi+tNALi4tUcl/49GVZfulhWAQMIWK5UtJUl
smVXPjCIN7k48JabLhs4fWW0P8O26kUx86vEmEVsKwXPD6CpN8oR0RSEogCSs5/7
33RmLPSQM9T5unohd7nzKZtXlXVIkeK7rNlg5gk54hX+X/eTVADhdMHAXuNiFadL
Z85gChEft9hlAMCw7+6T5tzQzMBag05n7mo/Ui619kK2RXeG23ELb6oe+maHUzHW
dpmEsHL+ik/iNpbRfkB/qa4WyF14/O/e
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:41:29 2025 by rpki-client